DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
fec6be3d56cb364f50a968cc1e8b231f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fec6be3d56cb364f50a968cc1e8b231f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fec6be3d56cb364f50a968cc1e8b231f_JaffaCakes118
Size
83KB
MD5
fec6be3d56cb364f50a968cc1e8b231f
SHA1
c057f019b7e53974614050c3cc76eea2ca7cc8be
SHA256
f4837ff849eac0b4b0f3923a55d8babbdf43efd657f2f023781394e4b55088d6
SHA512
73f3b5c5644dbaaf5e7ba341e4b2855d4aa82c348ee1908140fe53f9b22f6da41245d340b84ca1708950562282bcac8750aeb92052057b04cb6d37710e0eb024
SSDEEP
1536:Ws9lZ2U7nro1+8i92f94LnynYjg7wSIlqj5rgI6CpAcToeNeGgATz94Ln:h9lZ2UXZ8x94LynZ8qjppppheGPn94Ln
Checks for missing Authenticode signature.
resource |
---|
fec6be3d56cb364f50a968cc1e8b231f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE